The flaw occurs when libsoup receives a HTTP Range request whose suffix length exceeds the size of the requested content. The library incorrectly computes a negative start index that is not clamped, resulting in malformed partial content responses (HTTP 206) and causing log flooding. This buffer-length error corresponds to CWE-805 and can degrade service availability by exhausting log resources.

The vulnerability affects the libsoup library embedded in Red Hat Enterprise Linux releases 6, 7, 8, 9, and 10. Organizations running any of these distributions with applications that use libsoup's WebSocket or HTTP Range handling should be aware that the default configuration may be vulnerable until the fix is applied or mitigated.

The CVSS score of 4.8 indicates a moderate severity, while the EPSS score is currently unavailable, meaning the exploitation probability is not known. The vulnerability is not listed in CISA’s KEV catalog. Because an attacker can trigger the condition by sending crafted HTTP Range requests to any reachable server that uses libsoup, the attack vector is remote over the network. The impact is limited to denial of service through log flooding rather than code execution or data exfiltration.